Multiplex communications – Pathfinding or routing – Switching a message which includes an address header
Patent
1999-03-17
2000-04-25
Nguyen, Chau
Multiplex communications
Pathfinding or routing
Switching a message which includes an address header
709245, 713200, 370401, H04L 1250
Patent
active
060552360
ABSTRACT:
Methods and system for locating network services with distributed network address translation. Digital certificates are created that allow an external network device on an external network, such as the Internet, to request a service from an internal network device on an internal distributed network address translation network, such as a stub local area network. The digital certificates include information obtained with a Port Allocation Protocol used for distributed network address translation. The digital certificates are published on the internal network so they are accessible to external network devices. An external network device retrieves a digital certificate, extracts appropriate information, and sends a service request packet to an internal network device on an internal distributed network address translation network. The external network device is able to locate and request a service from an internal network device. An external network device can also request a security service, such as an Internet Protocol security ("IPsec") service from an internal network device. The external network device and the internal network device can establish a security service (e.g., Internet Key Exchange protocol service). The internal network device and external network device can then establish a Security Association using Security Parameter Indexes ("SPI") obtained using a distributed network address translation protocol. External network devices can request services, and security services on internal network devices on an internal distribute network address translation network that were previously unknown and unavailable to the external network devices.
REFERENCES:
patent: 5159592 (1992-10-01), Perkins
patent: 5227778 (1993-07-01), Vacon et al.
patent: 5550984 (1996-08-01), Gelb
patent: 5636216 (1997-06-01), Fox et al.
patent: 5708655 (1998-01-01), Toth et al.
patent: 5793763 (1998-08-01), Mayes et al.
patent: 5812819 (1998-09-01), Rodwin et al.
patent: 5867660 (1999-02-01), Schmidt et al.
patent: 5872847 (1999-02-01), Boyle et al.
G. Montene, Internet Engineering Task Force, Internet Draft, "Negotiated Address Reuse" (NAR), <draft-montenegro-aatn-nar-00.txt>, May 1998, pp. 1 to 22.
George Tsirtis, Alan O'Neil, Internet Engineering Task Force, Internet Draft, "NAT Bypass for End 2 End `Sensitive `Applications," <draft-tsirtsis-nat-bypass-00.txt>, Jan. 1998, pp. 1 to 5.
George Tsirtis, Pyda Srishuresh, Internet Engineering Task Force, Internet Draft, "Network Address Translation--Protocol Translation" (NAT-PT), <draft-ietf-ngtrans-natpt-04.txt>, Jan. 1999, pp. 1 to 13.
Jeffrey Lo, K, Taniguchi, Internet Engineering Task Force, Internet Draft, "IP Host Network Address (and port) Translation," <draft-ietf-nat-hnat-00.txt>, Nov. 1998, pp. 1 to 13.
Michael Borella, David Grabelsky, Ikhlaq Sidhu, Brian Petry, Internet Engineering Task Force, Internet Draft, "Distributed Network Address Translation," <draft-borella-aatn-dnat-01.txt>, Oct. 1998, pp. 1 to 21.
P. Srisuresh, G. Tsirsis, P. Akkiraju, A. Heffenan, Internet Engineering Task Force, Internet Draft, "DNS Extensions to Network Address Translators" (DNS.sub.-- ALG), <draft-ietf-nat-dns-01.txt>, Oct. 1998, pp. 1 to 24.
P. Srisuresh, Internet Engineering Task Force, Internet Draft "Security for IP Network Address Translator (NAT) Domains," <draft-ietf-nat-security-00.txt.>, Nov. 1998, pp. 1 to 11.
P. Srisuresh, K. Eg, Internet Engineering Task Force, Internet Draft, "The IP Network Address Translator" (NAT), <draft-rfced-info-srisuresh-05.txt>, Feb. 1998, pp. 1 to 24.
P. Srisuresh, K. Egev, Internet Engineering Task Force, Internet Draft, "Traditional IP Network Address Translator (Traditional NAT)," <draft-letf-nat-traditional-01.txt>, Oct. 1998, pp. 1 to 17.
P. Srisuresh, Matt Holdrege, Internet Engineering Task Force, Internet Draft, "IP Network Address Translator (NAT) Terminology and Consideration," <draft-ietf-nat-terminology-01.txt>, Oct. 1998, pp. 1 to 28.
Praveen Akkiraju, Yakov Rekhter, Internet Engineering Task Force, Internet Draft, "A Multihoming Solution Using NATs" <draft-akkiraju-nat-multihoming-00.txt>, Nov. 1998, pp. 1 to 32.
R. G. Moskowitz, Internet Engineering Task Force, Internet Draft, "Network Address Translation Issues with IPsec," <draft-moskowitz-net66-vpn-00.txt>, Feb. 5, 1998, pp. 1 to 8.
R. Thay, N. Doraswa and R. Gle, Internet Engineering Task Force, Internet Draft "IP Security," <drat-ietf-ipsec-doc-roadmap-02.txt.>, Nov. 1997, pp. 1 to 12.
T. Hain, Internet Engineering Task Force, Internet Draft, "Architectural implications of NAT," <draft-iab-nat-implications-02.txt>, Oct. 1998, pp. 1 to 14.
W.T. Teo, S.W. Yeeow, R. Singh, Internet Engineering Task Force, Internet Draft, "IP Relocation Through Twice Network Address Translator," <draft-ietf-nat-mat-00.txt>, Feb. 1999, pp. 1 to 20.
W.T. Teo, S.W. Yeow, R. Singh, Internet Engineering Task Force, Internet Draft, "Reverse Twice Network Address Translators" (RAT) <draft-teo-yeow-mip-rat-01.txt>, Dec. 1998, pp. 1 to 20.
W.T. Teo, Y. Li, Internet Engineering Task Force, Internet Draft, "Mobile IP Extension for Private Internets Support," <draft-teoyli-mobileip-mvpn-02.txt>, Feb. 1999, pp. 1 to 24.
Yakov Rekhter, Internet Engineering Task Force, Internet Draft, "Implications of NATs on the TCP/IP Architecture," <draft-ietf-nat-arch-implications-00.txt>, Feb. 1999, pp. 1 to 7.
K. Egevang and P. Francis, "The IP Network Address Translator (NAT)", RFC 1631, www.faqs.org/rfcs/rfc1631.html, May 1994, pp. 1 to 8.
Borella Michael S.
Grabelsky David
Nessett Danny M.
Sidhu Ikhlaq S.
3Com Corporation
Boortalary Forood
Lesavich Stephen
Nguyen Chau
LandOfFree
Method and system for locating network services with distributed does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and system for locating network services with distributed, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and system for locating network services with distributed will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-999319